Missing 'X-Frame-Options' Header

Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking control of their...

SUSE-SU-2017:0855-1 Security update for nodejs4

This update for nodejs4 fixes the following issues: - New upstream LTS release 4.7.3 The embedded openssl sources were updated to 1.0.2k CVE-2017-3731, CVE-2017-3732, CVE-2016-7055, bsc1022085, bsc1022086, bsc1009528 - No changes in LTS version 4.7.2 - New upstream LTS release 4.7.1 build: shared...

Cross-site Scripting (XSS)

i18next is vulnerable to cross-site scripting XSS attacks. When the .init method is called by passing interpolation options without passing an escapeValue, it set to undefined rather than true by default, not escaping user input...

Network Time Protocol Daemon (ntpd) 4.x < 4.2.8p10 Multiple Vulnerabilities

The version of the remote NTP server is 4.x prior to 4.2.8p10. It is, therefore, affected by the following vulnerabilities : - A denial of service vulnerability exists in the receive function within file ntpd/ntpproto.c due to the expected origin timestamp being cleared when a packet with a zero...

Cisco Systems Inc. Code Execution

The vulnerability in the code that handles CMP protocol for networking devices of Cisco Systems Inc. is related to incorrect processing of Telnet options specific to the CMP protocol. Additionally, there are no restrictions on the reception and processing of Telnet messages from sources that are...

CVE-2016-9168

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...

CVE-2016-9168

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...

CVE-2016-9168: Improper Input Validation

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...

PT-2017-9982

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions prior to 9.0.2 Description A missing X-Frame-Options header in the NDS Utility Monitor in NDSD could be used by remote attackers for clickjacking. Recommendations For versions prior to 9.0.2, update to version 9.0.2 ...

Alpari Options - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Alpari Options published at the 'play' market has multiple vulnerabilities...

CVE-2017-6417

Code injection vulnerability in Avira Total Security Suite 15.0 and earlier, Optimization Suite 15.0 and earlier, Internet Security Suite 15.0 and earlier, and Free Security Suite 15.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full...

CVE-2017-5567

Code injection vulnerability in Avast Premier 12.3 and earlier, Internet Security 12.3 and earlier, Pro Antivirus 12.3 and earlier, and Free Antivirus 12.3 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process...

CVE-2017-5565

Code injection vulnerability in Trend Micro Maximum Security 11.0 and earlier, Internet Security 11.0 and earlier, and Antivirus+ Security 11.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Trend Micro process via a...

CVE-2017-5566

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...

bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution

An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local, authenticated attacker could use this flaw to exploit poorly written setuid programs to elevate their privileges under certain circumstances...

PT-2017-16578

Name of the Vulnerable Software and Affected Versions AVG Ultimate versions 17.1 and earlier AVG Internet Security versions 17.1 and earlier AVG AntiVirus FREE versions 17.1 and earlier Description A code injection issue allows a local attacker to bypass a self-protection mechanism, inject...

CVE-2017-5567: Uncontrolled Search Path Element

Code injection vulnerability in Avast Premier 12.3 and earlier, Internet Security 12.3 and earlier, Pro Antivirus 12.3 and earlier, and Free Antivirus 12.3 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process...

CVE-2017-6417: Uncontrolled Search Path Element

Code injection vulnerability in Avira Total Security Suite 15.0 and earlier, Optimization Suite 15.0 and earlier, Internet Security Suite 15.0 and earlier, and Free Security Suite 15.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full...

CVE-2017-5566: Uncontrolled Search Path Element

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...

CVE-2017-5565: Uncontrolled Search Path Element

Code injection vulnerability in Trend Micro Maximum Security 11.0 and earlier, Internet Security 11.0 and earlier, and Antivirus+ Security 11.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Trend Micro process via a...